summaryrefslogtreecommitdiff
path: root/spec/integration
AgeCommit message (Collapse)Author
2020-06-05Allow configuring Python version using environment variablesmo khan
2020-06-05Launch the desired Java versionmo khan
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-29Ensure the correct license is detectedmo khan
2020-05-29Allow custom conan configurationmo khan
* Use git fetch with a depth of 1 * Control Conan environment via environment variables * Allow specifying a custom CONAN_LOGIN_USERNAME and CONAN_PASSWORD * Specify a default CONAN_CACERT_PATH to point the system cert file * Tie CONAN_LOGGING_LEVEL to LOG_LEVEL * Tag and skip offline environment tests because it was shutdown * Add CHANGELOG entry
2020-05-27Add tests for each report version when scanning conan projectsmo khan
2020-05-26Scan Conan projectsmo khan
* Scan the conan examples project * Split licenses by comma * Add integration test job for c projects * Add package_manager, version and path to v2.1 report * Detect collisions between names from different package managers * Add CHANGELOG entry * Update README to indicate Conan support * Print timestamps in install script
2020-05-22Add functional tests to the pipelinemo khan
* Move jobs to gitlab-ci.yml files that match the stage they belong to. * Move linter job to build stage * Add functional test jobs * Reduce max size to 2 GB * Pass the current pipeline image to the downstream jobs * Replace `edge` tag with `latest` * Use $CI_DEFAULT_BRANCH instead of master * Move `.env*` files to config dir and update RELEASE instructions * Combine `tag` and `release` stages into `deploy` stage as recommended in GitLab docs * Make the `build-docker-image` job interruptible * Fix issues found in code quality report
2020-05-20Detect maven package from the same GL projectmo khan
2020-05-20Upload maven package to GL repo for testingmo khan
2020-05-20Pass the `bower_ca` env variable to bowermo khan
2020-05-19Scan example projectsmo khan
2020-05-19Test example bower projectmo khan
2020-05-19Fetch bower dependencies from custom repo with custom cert chainmo khan
2020-05-19Collect dependencies of dependencies in bower projectmo khan
2020-05-19Add --allow-root option to install stepmo khan
2020-05-19Add bower dependencies and expected assertionsmo khan
2020-05-19Add spec for bower projectmo khan
2020-05-15Pull yarn packages from a custom registrymo khan
2020-05-14Clean up the golang module fixture filesmo khan
2020-05-14Add specs for previous versions of golangmo khan
2020-05-14Update go list command to be compatible with 1.14mo khan
* Add missing packages to report fixtures
2020-05-13Remove devDependencies from yarn scansmo khan
* Inline creation of PipPackage in legacy scan results * Add CHANGELOG entry
2020-05-05Specify npm cafile settingmo khan
* [cafile](https://docs.npmjs.com/using-npm/config#cafile) * Use host network for development scripts * Specify path to JAVA keystore in list command * Add CHANGELOG entry
2020-05-04Add tests for js npm projectsmo khan
* Add tests for js projects with npm-lock.json file * Add specs for project that does not have a package-lock.json * Fix typo in loading fixture file content not path * Remove dev dependencies for expected js test reports * Add spec for using different engine * Add latest nodejs LTS * Cleanup files after install and disable NPM update checks * Install a .curlrc to remove progress meter * Export LOG_LEVEL=debug in dev mode * Update fixture files * Update to latest patch level of nodejs, php, python, ruby * Add CHANGELOG entry * Move prepare_javascript from bash to ruby
2020-04-29Allow gradle to fetch from TLS endpoint with custom certmo khan
* Add CHANGELOG entry * Avoid shell expansion errors * Add gradle-license-plugin to local gradle cache * Download gradle plugin dependencies and use backwards compatible syntax in init.gradle * Use latest gradle v2
2020-04-22Use keytool to import a ca certificatemo khan
* Remove dind for license scan and move it to code_quality * Add spec to verify TLS connections to maven repo * Add CHANGELOG and bump version
2020-04-17Remove debug LOG_LEVEL from specmo khan
2020-04-17Fix linter errorsmo khan
2020-04-17Split java 8/11 files to separate fixture directoriesmo khan
2020-04-17Split groovy and kotlin specs because they are supported differently based ↵mo khan
on java version and gradle version 😵
2020-04-17Test specific versions of gradle with matching versions of javamo khan
2020-04-17Test out gradle groovy buildsmo khan
2020-04-16Update JAVA_HOMEmo khan
2020-04-16Ensure at least one runtime dependency is detected in gradle specsmo khan
2020-04-15Use GRADLE_CLI_OPTS when invoking gradle directlymo khan
* Extract gradle_command method * Bump version and update CHANGELOG * Remove prepare_java step from run.sh
2020-04-14Remove dependency sourced from S3mo khan
2020-04-09Specify PIP_CERT when installing pip packagesmo khan
* Add CHANGELOG entry * Move method `default_env` to Python class
2020-04-03Install root certificatemo khan
* Install certificate in root ca trust store * Use PIP_CERT environment variable to specify path to the certificate bundle * Do not override user provided PIP_CERT * Perform shallow clone when possible * Update CHANGELOG and bump version
2020-04-02Reproduce failure with go modules scanningmo khan
* Install sudo for existing configurations * Detect dependencies in a gomodules project * Add CHANGELOG entry and bump version * Symlink to $GOPATH for non go modules projects * Remove problematic go get setup
2020-04-01Pull package info from sources in Pipfile.lockmo khan
* Exclude dependencies in "develop" group" * Install pipenv by default * Use .venv to match the default location as pipenv * Use pip-licenses to detect licenses in Pipfile project * Add variation of the MIT License * Redirect asdf install stdout to /dev/null * Add CHANGELOG entry and bump version
2020-04-01Fix bug with forwarding LICENSE_FINDER_CLI_OPTSmo khan
2020-03-30Use virtualenv, pip-licenses to scan projectsmo khan
* Add PIL License to list of normalized licenses * Update Python 3 v2.0 report fixture * Add CHANGELOG entry * Define local variables in bash functions * Ensure `SETUP_CMD` continues to work for python projects * build virtualenv app-data cache * Fallback to legacy scanner when SETUP_CMD is used * Extract Shell class to be able to pass custom env
2020-03-26Install pip packages from a custom indexmo khan
* Read PIP_INDEX_URL to identify where to download packages from
2020-03-20Install maven packages for multi-module setupmo khan
* Install packages when multiple maven modules are detected * Add CHANGELOG entry * Install gem silently * Add package manager to test description * Sort paths
2020-03-19Fix usage of SETUP_CMDmo khan
2020-03-18Fix linter errormo khan
2020-03-18Use MAVEN_CLI_OPTSmo khan
2020-03-18Split recursive optionmo khan
2020-03-18Fix how options are passed in specmo khan